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Title: Method for Detecting Aberrant Behavior of a Financial Instrument 

This application claims priority from U.S. Provisional Application 60/161,083, which is 
incorporated herein by this reference. 

6 

Field of the Invention 

This invention relates to financial instruments. More particularly, the invention 
relates to a method for detecting changes in the attitude or perception of investors 
with respect to a financial instrument such as a stock, deduced from the trading 
10 activity. 

Background of the invention 

O Financial instruments, such as stocks or bonds, are commonly traded on 

m public and private markets or exchanges (referred to collectively herein as "markets"). 
y(5 A financial instrument may be said to have a "behavior" defined by various pieces of 
3 information relating to the trading of the instrument such as the price of the 

■isr r, 

ij instrument, the volume or number of shares of the instrument traded in a trading 

session (i.e. the volume) and the number of individual transactions for the instrument 
E3 during the trading session. In some cases, aberrant behavior may be related to the 
lio availability of new information relating to the business organization underlying the 
3 stock. 

Investors have long sought methods of predicting or anticipating changes in 
the price of a financial instrument, such as a stock or bond, by attempting to detect 
changes and trends in the past behavior of the instrument. Many methods have been 

25 proposed for doing so. 

Many of these methods rely on a statistical analysis of the instrument's price 
over a selected prior period of time. Typically, such methods examine the average 
and standard deviation of the stock price. Methods which rely on price information 
only are unable to detect changes in the perception of an instrument which do not 

30 have substantial effect on its price. For example, if the volume of trading in a stock 
increases dramatically for a short period (i.e. a trading session or a part of a session), 
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the price may not be substantially affected. However, investors may still wish to be 
alerted to the increase in volume, which may be related to an increase in demand or 
supply of the stock on the market and which may important for some investors in 
selecting their own transactions. 

5 Similarly, methods which rely on a single selected time period may not be able 

to detect aberrant behavior which might have been identified if a different time period 
had been used. For example, some aberrations in a stock's price will seem large 
compared to the standard deviation of the stock's price over the last few days but may 
appear relatively small in comparison to the standard deviation of the stock's price 

10 over an extended period such as two years. Such an aberration will not be detected 
by a method which utilizes only data collected over a two year period. Other 
aberrations may be more easily detected when a shorter time period is used. For 

□ example, if a stock typically has a very steady price, but has recently experienced a 

gt volatile period, then the use of a short recent time period may not identify an aberrant 

Jjj5 change in the stock's behavior. 

O In many cases, an instrument is traded in more than one market. Methods 

= which rely on information from only one market will fail to identify aberrant behavior 
!\ which occurs on another market where that same instrument is traded . This may 
o happen, for example, where a small group of investors, all of whom trade on one 
j|p market learn some information relating to an instrument. These investors may enter 
g into transactions which lead to aberrant behavior of the instrument. Such aberrant 

behavior will not be detected if information from that market is not considered by the 

method. 

Variations in the behavior of an instrument may be related to overall changes in 
25 the market or exchange on which the instrument is traded. As a result, methods 
which consider only the behavior of the instrument and ignore the overall behavior of 
the underlying market may identify an instrument as having aberrant behavior when in 
fact the instrument's behavior was entirely in keeping with overall changes In the 
market. 

30 Accordingly, there is a need for a method for detecting aberrant behavior of a 

financial instrument which takes into account multiple factors relating to the 
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instrument over varied time periods. Where the instrument is traded on multiple 
markets, the method will preferably also take into account the behavior of the 
instrument on at least some, or more preferably, on all of those markets. The method 
will preferably also consider the behavior of the instrument in the context of the overall 
5 market or markets on which the instrument is traded. 

Summary of the Invention 

The present invention provides a method for identifying aberrant behavior in the 
trading of a financial instrument. The method examines three components of the 
1 0 instruments behavior: the closing price, the volume of transactions and the number of 
individual transactions. The closing price and volume of transactions in a financial 
instrument are commonly available pieces of information for publicly traded 
□ instruments. However, the total number of transactions in an instrument during a 
gi trade session is not generally reported by stock exchanges, etc. Accordingly, this 
^5 information must be calculated by monitoring data feeds from relevant markets. 
Q The method of the present invention compares the value of the three 

7* components of behavior of the instruments with the average of those components 
J\. during a series of time periods. The lengths of the time period may range from 
P relatively short (five days) to relatively long (several years or longer). Each time period 
jj|0 ends with the trading session immediately preceding the most recent trading 
^ session. When a component of the behavior of the instrument in its most recent 

trading session differs from the average for that component in a particular time period 
by more than a selected amount (which is in turn determined by multiplying the 
standard deviation of the component over the time period by a selected constant), 
25 then an "aberration flag" is raised and a degree of aberration is calculated. The 
degree of aberration indicates the magnitude (in percentage) of the difference 
between the actual behavior of the component and its expected behavior based on the 
average over the particular time period. The degrees of aberration for all components 
based on a single time period are combined by summing the absolute value of the 
30 degree of aberration for the price component with a positive degree of aberration for 
the volume and number of transaction components. The time period degrees of 



-3- 



OCT-25-00 16*33 FROM = 



ID: 



PAGE a/ 26 





aberration are summed and scaled by the ratio of the number of aberrant flags to the 
maximum possible number of aberrant flags to provide a total degree of aberration for 
the instrument on it most recent trading day. 

In a similar manner, the behavior of tine instrument is also compared to the 
5 expected behavior of the market, and sufficiently large differences between the two are 
identified as market aberrations. Generally, the market will exhibit a higher standard 
deviation for each component of its behavior than a typical instrument and therefore, 
few if any market aberration flags will be raised for a particular instrument after a 
typical trading session. 

10 The results of the method are provided in a report, which can be used in a 

number of ways to identify whether the financial instrument or its associated business 
organization warrants further investigation to determine the cause of the aberration. 
£3 First, any aberrant flags may be used to indicate that the instrument warrants 

. r-c 

m further investigation. 

Second, a number of aberrant flags raised for the instrument may be compared 
O to the maximum number of flags, and the instrument may be deemed to require 
~£ further investigation only if a certain percentage (i.e. 25%) of the maximum number of 

* u flags is in fact raised. 

O Third, the number of market aberrations for an instrument may be reviewed. If 

ijlO any market aberration is identified, the instrument may be considered to warrant 

^ investigation. 

Fourth, the number of aberrant flags (compared to the history of the instrument 
itself) may be plotted for consecutive trading sessions, and substantial changes in 
the number of flags raised may be relied on to indicate that a change In the public 
25 perception of the instrument has occurred, warranting further investigation- 
Fifth, the total degree of aberration for a series of trading sessions may be 
plotted and substantial changes in this index may be relied on as an indicator that the 
instrument warrants further investigation. 



4 
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Brief Description of the Drawings 

A preferred embodiment of the present invention will now be described in detail 
with reference to the drawings, in which: 
5 Figure 1 is a block diagram illustrating a typical market on which financial 

instruments are traded; 

Figure 2 is a flowchart illustrating a method for identifying aberrant behavior of a 
financial instrument; 

Figure 3 is a table illustrating the operation of the method of Figure 2; 
10 Figure 4 is a report which may be used to analyze the results of the method of 

Figure 2; and 

Figure 5 is a second report which may be used to analyze the results of the 
| method of Figure 2. 

iLi Is 

*. * — 

Lfl 5 Detailed Description of the Preferred Embodiment 
^ Reference is first made to Figure 1 , which illustrates a typical financial 

*fi instrument market 20 in a simplified form. Market 20 may be a public or private 
l* market or exchange, such as a stock market. Market 20 comprises a plurality of 
% instruments 22, which may be stocks. Instruments 22 are traded by investors 26. 
U|0 Depending on the structure of market 20, this trading may be accomplished through 
□ agents (not shown). An index 28 is calculated to give a represent value of the stocks 
in market 20. Index 28 may be calculated based on all of the instruments 22 or may 
be calculated based on only a subset of the instruments 22. Index 28 may be one of a 
number of types of well known indexes for financial instruments. Index 28 may be 
25 designed to indicate the total value of the instruments 22 used to calculate it, or may 
be designed to indicate an average value change in the instruments 22 used to 
calculate it, or it may have another design. A person skilled in the art will be capable 
of selecting a method of calculating index 28 to reflect one or more aspects of the 
market 20. 

30 Figure 2 is a flowchart illustrating a method 100 according to the present 

invention. Method 100 allows a particular financial instrument 22 (Figure 1) to be 
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evaluated to determine if it is exhibiting an aberrant market behavior. Method 100 
relies on three components of the behavior of an instrument 22: the instrument's price 
during a set of trading sessions, it's volume (i.e the number of shares of the 
instrument traded) during each of the trading sessions; and the actual numbers of 
5 transactions for the instrument during each of the trading sessions. Instruments 22 
include a particular instrument 30. Method 100 will be described using instrument 30 
as an example. Method 1 00 will also be explained with reference to Figure 3, which is 
a table showing the results of the steps of method 100. 

Method 100 commences in step 102, in which a plurality of time periods 40 are 
1 0 selected. The behavior of instrument 30 during each of these time periods 40, 

immediately prior to the current day, is used in method 1 00. These time periods will 
preferably include some relatively short time periods (i.e. 2-10 days) and some 
j{ relatively long periods (i.e. longer than 1 yearl). Each time period 40 includes a 
I series of consecutive trading sessions, and each time period 40 ends with the trading 
i 5 session preceding the most recent trading session of instrument 30. For example, if 
* a particular period is 1 year and the most recent trading session of instrument 30 took 
3 place on September 9, 2000, then the 1 year time period would run from September 9, 

1999 to September 8, 2000 and will include all trading sessions on and between 
^ those dates. 

MO As an example, eight time periods 40 may be used to assess instrument 30: 

5 five davs ' ten davs . days, thirty days, sixty days, one hundred and twenty days, 
one year and two years. This set of time periods 50 is weighted somewhat towards 
the shorter periods (i.e. 4 of the 8 time periods are thirty days or less). This will 
produce an analysis that is correspondingly weighted towards the shorter time 
periods. A different selection of time periods may have a more balanced weighting of 
time periods or may be weighted in a different way. Any number of time periods may 
be used with the present invention and time periods may be chosen in any way. 

Method 100 next proceeds to step 104. In this step, the date 41 of the most 
recent trading session of instrument 30 is recorded along with the following three 
components of the behavior of instrument 30 on that date: (i) the instrument's closing 
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price 42 on date 41; (ii) the volume 44 of trading in instrument 30 on date 41; and (Hi) 
the number of transactions 46 for instrument 30 on date 41 . 

Referring to Figure 3, the date 41 is recorded as 1/Oct/1999. The closing price 
42 of instrument 30 on that day was 17, the volume 44 was 475,482 and the number 

of transactions 46 was 73. 

Referring again to Figure 2. Method 100 next proceeds to step 106, in which 
the average 48 and standard deviation 50 of each component (i.e. (i) closing price; (ii) 
volume and (iii) number of transactions) of the behavior of instrument 30 for each 
trading session during each time period 40 selected in step 102 is calculated. 

Referring to Figure 3, the average dosing price for instrument 30 on the five 
days preceding 1/Oct/1999 was 17.05 and the standard deviation of the price was 
0.0548. The average volume for instrument 30 during the two years preceding 
1 /Oct/1 999 was 192,108 and the standard deviation of the volume during this period 
was 348,983. 

Reference is again made to Figure 2. Method 100 next proceeds to step 108, 
in which an expected variation 52 for each component of the behavior of instrument 30 
is calculated, based on each time period 40. The value of expected variation 52 for a 
particular component calculated based on a particular time period 40 (i.e. the 
expected variation 52 of the closing price of instrument 30, based on the closing 
prices over the previous five days) represents the expected maximum difference 
between the instrument's most recent actual value for that component (i.e. the closing 
price on date 41) and the average for that component during the period in question, 
expressed as a percentage of the average. Expected variation 52 is calculated as 
follows: 



K is a constant selected for market 20 based on one of the following criteria: 

i. K may be selected to represent the volatility of the market 20 on which 

instrument 30 is traded. For example, a selected market may be 



Expected Variation 52 = 



Kx Standard Deviation 50 
Average 48 
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assigned a K=1 and all other markets may be compared to It. If we 
assume that the volatility of a market may be approximated by calculating 
the standard deviation of an index related to the market, then the volatility 

of two market may be compared by comparing the standard deviation of 
5 their indexes. First, the standard deviation of the net change in a 

selected set of trading sessions (i.e. all trading sessions in the previous 
year) in an index related to the selected market or exchange may be 
calculated. The standard deviation of the net change in index 28 (Figure 
1) during the same set of trading session may then be calculated. The 
1 0 value of K for market 20 may then be calculated by dividing the standard 

deviation in index 28 by the standard deviation of the net change in the 
selected market. This will effectively "normalize" the volatility for market 
- 20 to the volatility of the selected market. 

3 1 . K may be selected by trial and error so that method 100 identifies a pre- 
1 5 selected number of financial instruments 22 traded on market 20 as exhibiting 

j aberrant behavior. For example, method 100 may be repeated iteratively until a 

3 K value is found which identifies 20-25% of the instruments 22 after a majority 

* of trading sessions. 

Where instrument 20 is traded on multiple markets, K may be calculated based 
on the volatility of all such markets (for method (i) above) or based on the total number 
of stocks on all such markets (for method (ii) above). 

In the present exemplary embodiment of method 100, K = 2. This value was 
selected by trial and error in accordance with method (ii) above. 

Referring to Figure 3, the expected variation 52 for the closing price of 
25 instrument 30 based on the five day time period 40 is calculated as: 



2 x 0.0548 

Expected Variation (Five days / Price) = — — — — 

= 0.0064 
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This means that the closing price 42 of instrument 30 in its most recent trading 
session (1 /Oct/1 999) is expected to vary by up to 0.642% from the average closing 
price during the five day time period. 

Similarly, the expected variation 52 for the volume of instrument 30 based on 

5 the two year period is: 



is 



25 



2x348,983 

Expected Variation (Two Years / Volume) = 

192 ? lu© 
= 3.6332 



This means that the volume 44 of instrument 30 in its most recent trading 
1 0 session ( 1 /Oct/1 999) is expected to vary by up to 363.32% from the average voiume 
during the two year period. 

Reference is again made to Figure 2. Method 100 next proceeds to step 110, 

i 

in which the actual percentage variation 54 between the most recent value of each 
component of the behavior of instrument 30 and the average price during each of the 
Uj1 5 time periods 40 is calculated. In the case of the price component of the behavior of 
instrument 30, actual variation 54 for each time period 40 is calculated as follows: 



, . r M Pnce 42 (on date 41) -Average 48 

Actual Variation 54 ~ ■ 7- 

[ Average 48 

1 where the average 48 is the average value of the closing price in each 

20 respective time period 40. The actual variation 54 for the volume and number of 

transactions components of the behavior of instrument 30 are calculated in a similar 

fashion. 

Referring to Figure 3, the actual percentage variation 54 between the current 
price 42 and the average price over the preceding five day is calculated as follows: 



17-17.05 

Actual Variation (Five days / Price) = — — — — 

= -0.0029 
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The actual percentage variation 54 between the current volume 44 and the 
average volume over the preceding 2 years is calculated as follows: 



475,482-192,108 

Actual Variation (Two Years / Volume) = — 

192, lOo 

= 1.4751 



Reference is again made to Figure 2. Method 100 next proceeds to step 112, 
in which the actual variation 54 for each component of the behavior of instrument 30 in 
each time period 40 is compared to the expected variation 52 for that component and 
time period 40. For each component and time period 40, if the actual variation 54 
1 0 exceeds the expected variation 52, then that component and time period is marked as 
i having an aberrant flag 56 and a degree of aberration 58 is calculated as follows: 

i Degree of Abenatic-n 58 = | Actual Variation 54j - Expected Variation 52 



Li 5 The usage of the aberrant flags 56 and degree of aberration is explained 

further below. 

Referring to Figure 3, the price component of the behavior of instrument 30 is 
not considered aberrant (i.e. it does not have an aberrant flag 54) compared to the 
previous five day period, since the absolute value of the actual percentage variation 54 

h 

20 of the closing price 42 compared to the average price during the five day period 

(0.0029) is less than expected variation 52 (0.0064) based on that period. However, 
the volume 44 of instrument 30 (on 1 /Oct/99) is considered aberrant (i.e. it does have 
an aberrant flag 56) since the absolute value of actual percentage variation 54 of the 
current volume 44 compared to the average volume during the five day period (9.1016) 
25 is greater than the expected variation 52 (.9096). The degree of aberration 58 for 
volume 44 compared to the average volume during the five day period is calculated 
as: 
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Degree of Aberration 58 = |9.1016|- 0.9096 

= 8.1920 

Reference is again made to Figure 2. Method 100 next proceeds to step 114, 
in which a time period degree of aberration 60 is calculated for each time period 40. 
Time period degree of aberration 60 for any particular time period N is calculated as 
5 follows: 

Time Period Degree of Aberration (Time Period N) 

= |Degree of Aberration for Price in Time Period Nj 

-KDegree of Aberration for Volume in Time Period N, if it is positive) 

+(Degree of Aberration for Number of Transactions in Time Period N, if it is positive) 

Time period degree of aberration 60 is intended to provide an overall indication 
P of the extent to which the instrument's behavior deviates from the behavior expected 
"B o based on the time period under consideration. In general, investors are most 

concerned with the price component of the behavior of a financial instrument, such as 
P instrument 30. The absolute value of the degree of aberration 68 for the price 
5 component of the instrument's behavior is always Included in the time period degree 
■ of aberration 60. However, aberrations in the volume and number of transactions 
H|5 components will generally only be of interest when the aberration results from volume 
fH and/or transaction levels that are higher than expected. One reason for this is that an 
G imbalance in the information available to investors is more likely to increase the 
~ = amount of activity around a financial instrument 20, rather than to decrease it 

Accordingly, the degree of aberration 58 for these components is only included in the 
20 time period degree of aberration 60 if it is positive. 

Referring to Figure 3, the time period degree of aberration 60 for the sixty days 

time period 40 is calculated as follows: 

Time Period Degree of Aberration (Sixty Days) = |-0.0079| + 4.3956 + 0 

=4.4035 

25 

Reference is again made to Figure 2. Method 100 next proceeds to step 1 16, 
in which the total number of aberrant flags for each component of the behavior of 
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instrument 30 is calculated. In addition, a total number of aberrant flags 65 and the 
maximum number of aberrant flags 67 for all components and all time periods 40 is 
calculated. Referring to Figure 3, the total number of price aberrant flags 62, volume 
aberrant flags 63 and number of transactions aberrant flags 64 are 1 , 7 and 5, 
respectively. The total number of aberrant flags 65 is 1 3 and the maximum number of 

aberrant flags 67 is 24. 

Reference is again made to Figure 2. Method 100 next proceeds to step 120, 
in which a total degree of aberration 66 for the behavior of instrument 30 is calculated 
as follows: 

Total Degree of Aberration 66 

Total Aberrant Flags 65 
= Sum of All Time Penod Degrees of Aberration 60 x Aberram Hags6 7 

Referring briefly to Figure 3, the total degree of aberration 66 for instrument 30 on 
l/oct/99 is calculated as follows: 

Total Degree of Aberration 66 

13 

= (8. 1920+ 5.5054 + 4.5203 + 4.6278 + 4.4035 + 1 .7541 + 0.2281 + 0.000) x — 
= 15.8336 

Method 100 next proceeds to step 122. In this step, a market expected variation 
70 is calculated for market 20 for the same three components (price, volume and 
number of transactions) and for the same time periods 40 selected in step 102. 
Since market 20 as a whole does not have a price per $e, the calculations for this 
component are done using the closing value of index 28 in each trading session. The 
volume and number of transactions components will be based on the total volume 
and number of transactions for financial instruments 22 which are used to calculate 
index 28. The steps in the calculation of the expected market variation 70 are not 
shown in detail, since they are similar to steps 106-108. The value of K previously 
selected (as described in step 108) is used for the calculation of the market expected 
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variation values 70. Figure 3 illustrates an exemplary market expected variation 70 for 
each component and time period 40. 

Method 100 next proceeds to step 124, in which the actual variation 54 for each 
component and time period 40 is compared with the corresponding market expected 
5 variation 70 to determine if that component of the behavior of instrument 30 is 
aberrant when compared to the market as a whole. If the actual variation 54 for a 
component in a time period 40 exceeds the expected market variation 70, then a 
market aberration flag 72 is set for that component. 

Method 100 next proceeds to step 126, in which the number of market aberrant 
1 0 flags (i.e. market price aberrant flags 74, market volume aberrant flags 76 and market 
number of transactions aberrant flags 78) for each component of the behavior of 
instrument 30 and the total number of market aberrant flags 80 are calculated. 
3 Referring to Figure 3, the number of market price aberrant flags 74 is shown as 

? 1 , the number of market volume aberrant flags 76 is shown as 1 and the number of 
til 5 market number of transactions aberrant flags 78 is shown as 2. The total number of 
3 market aberrant flags 80 is shown as 4. 

^ Reference is again made to Figure 2. Method 100 next proceeds to step 128, 

M. in which a report 200 (not shown) is produced to indicate the results of method 100. 
SI Report 200 includes the following information: 

-total number of price flags 62 
-total number of volume flags 63 
-total number of volume/transaction flags 64 
-total number of total flags 65 
-total maximum possible number of flags 
25 -total degree of aberration 66 

-total market price flags 74 
-total market volume flags 76 
-total market volume/transaction flags 78 
-total market flags 80 

30 -if the number of total flags 65 is greater than 0, an indication that the behavior 

of instrument 30 on the most recent trading is identified as aberrant 

-13- 
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-if the number of total market flags is greater than 0, an indication that the 
behavior of instrument 30 on the most recent trading day is identified as market 
aberrant. 

Method 100 then ends. 
5 Report 200 may be used by an investor 26 in several ways. 

First, if any aberrant flag 65 is indicated in report 200, this may indicate that the 
perception of investors towards instrument 30 has changed. As a result, the 
business organization associated with instrument 30 may warrant investigation to 
determine if any basis for a potential change in the perception of investors exists. 
1 0 Such a basis may include a press release by the business organization relating to its 
financial performance, a change in investor confidence in the economic sector to 
which the business organization belongs, etc. 
J Second, the number of aberrant flags 65 may be compared to the possible 

? maximum number of flags. The inventor has found that some financial instruments 
U1 5 which do not actually warrant investigation wili often have one or more aberrant flags 
S 65. Accordingly, the inventor has determined that a financial instrument 20 and the 
^3 business organization associated with it is more likely to warrant investigation if the 
H= total number aberrant flags 65 is more than 25% of the maximum possible number of 
m flags is actually. 

~j>0 A third way of using report 200 involves the total number of market aberrant 

O flags 80. Typically, the components of the behavior of a market as a whole will have a 
much larger standard deviation than those of a particular financial instrument traded 
on the market. As a result, the market expected variation 70 (Figure 3) for most 
components of market behavior will be larger than the corresponding expected 
25 variation 52 for an individual instrument 20. The inventor has found that while many 
instruments 20 will have a small number of aberrant flags 65 (i.e. one or two flags) for 
many trading sessions, most of these instruments 20 will have no total market 
aberrant flags 80 for the same trading sessions. An instrument which has a market 
aberrant flag may therefore be considered to be highly aberrant. This data may be 
30 used to reinforce the conclusion that an instrument is behaving highly aberrantly 
based on the number of total aberrant flags 65 for that instrument 20. 

-14- 
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Typically, method 100 will be carried out for a number of instruments 20 which 
are of interest to a particular investor or group of investor. The reports 200 prepared 
for each such instrument 20 may be combined into a single report which lists any 
instrument which is newly identified as having aberrant under the criteria discussed in 
5 the first three methods of using report 200 above. Such a report will allow an investor 
to quickly determine which instruments 20 warrant greater concern due to their 
behavior in a particular trading session. 

Reference is next made to Figure 4, which is a graphical report 202 which 
illustrates a fourth way of using report 200. In report 202, the total number of aberrant 
1 0 flags 65 indicated for instrument 30 for a series of trading sessions TS1-TS41 is 
shown. This information will be available from the report 200 produced for the 
instrument 30 after each of the trading sessions. An investor may use report 202 to 
% identify a period of aberrant behavior by instrument 30 over a series of trading 
u 2 sessions. One way of doing so is to calculate the average and standard deviation of 
Ul 5 the number of total aberrant flags 65 identified for the instrument over a selected 
J number of prior trading sessions- If the number of flags for the current session 
^ exceeds the average by a selected number of standard deviations, then the 
M= instrument 30 and the associated business organization may warrant investigation. 
m For example, if the selected number of sessions is 5 and the selected number of 
So standard deviations is 1 , an investor may carry out the following analysis after TS8: 

Flags in five most recent trading sessions (TS3 - TS7): 1, 2, 2, 3, 3. 
Average number of flags in five most recent trading sessions: 2.2 
Standard Deviation of number of flags in five most recent trading session: 0.84 
25 Threshold for identifying whether an investigation is warranted: 2.2 + 1 x 0 84 

= 3.04 

Number of flags on TS8: 1 3 
Result: Investigation is warranted. 

If the threshold is exceeded for several trading sessions (i.e. TS8, TS9, TS10), 
30 the need for an investigation is more clearly warranted. 
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Reference is next made to Figure 5, which is a graphical report 204 that 
illustrates a fifth way of using the information provided in report 200. Report 204 is a 
graph of the total degree of aberration 66 for instrument 30 on trading session TS1 - 
TS 41 . This report may be used in a manner similar to that described above for report 
202. By comparing the total degree of aberration 66 for a particular trading session 
with the total degree of aberration with a series of previous trading sessions, the need 
to investigate instrument 30 and its related business organization may be identified. 
For example, the increase in the total degree of aberration shown TS8, TS9, TS20 and 
TS36 each exceed the sum of the average and one standard deviation of the total 
degree of aberration 66 over the previous five days. The investors has found an 
extremely large change in the total degree of aberration, such as the change shown 
on TS39, will typically occur when new information which causes a major change in 
the perception of a financial instrument becomes widely available to investors. 

Like the first three ways of using report 200, the fourth and fifth ways of using 
report 200 may also be used to provide a daily report indicating instruments 20 which 
are newly identified as warranting investigation. 

The inventor has implemented method 100 as a computer program. This 
computer program is also capable of automatically producing reports 202, 204 and 
206, and implementing the five ways of using report 200 to provide automated lists of 
instruments warranting investigation. 

A preferred embodiment of the present invention has been described. 
Furthermore, a number of ways of using the report 200 produced by using method 
100 have been described. Each of these ways of using report 200 is also part of the 
present invention. Other variations of the present invention will be apparent to a 
person skilled in the art. All such variations fall within the scope of the present 
invention, which is limited only by the following claims. 



